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Reply to Office Action of Feb. 9, 2007 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

Claim 1 (Canceled) 

Claim 2 (Currently Amended): The method of h . ; i: s '- wherein said step of 

determining the sender identifier comprises the step of ascertaining an IP address for the sender. 

Claim 3 (Currently Amended): The method of ; . o. ^ : wherein said step of 

determining the sender identifier comprises the step of associating the sender with a peer IP 
address of a TCP connection associated with the sender. 

Claim 4 (Cancelled) 

Claim 5 (Currently Amended): The method of * 1 u«> L Uuo i ! wherein said cumulative 
penalty count value comprises an activity penalty count charged to the sender for current 
undesirable sender activity and a time-dependent penalty count determined from previous 
undesirable sender activity. 

Claim 6 (Original): The method of claim 5 wherein said time-dependent penalty count 
comprises a zero value subsequent to a pre-established retention period. 

Claim 7 (Previously Presented): The method of claim 5 wherein said time-dependent 
penalty count comprises a prior activity penalty count value reduced by a time-dependent decay 
factor. 

Claim 8 (Currently Amended): The method of s. - ^ > c . ^ - wherein said undesirable 
activity comprises a member of the group consisting of: sending a large number of e-mails, 
sending emails of relatively large sizes, using a relatively large amount of TCP connection time, 
and causing a TCP timeout. 
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Claim 9 (Currently Amended): The method of r-ki+m-4ebun 14 wherein said system 
overall resource usage status is a function of a member of the group consisting of: the number of 
concurrent TCP connections being maintained, the number of e-mail files in an incoming 
message queue, and the amount of disk space being utilized for an incoming message queue. 

Claim 10-11 (Canceled) . 

Claim 12 (Currently Amended): The method of - v < , - , wherein, for said 
selective-rejection state, if said cumulative penalty count value has a zero value, said step of 
processing the incoming e-mail comprises the step of accepting the incoming e-mail. 



Claim 13 (Canceled) 

Claim 14 (Currently Amended): a memoes comprising: 
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unJoUih i joonr^iho nv^onu^ o-mtU on n» k^!- of icuvtion ib ioi . 



wherein said step of randomly rejecting comprises the step of accepting the in 
mail if said random number is greater than said rejection factor and rejecting the incom 
if said random number is not greater than said rejection factor. 



Claim 15 (Cui 
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said step of specifying the r 
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Claim 16 (Currently Amended): ^5- rvJ o- x :v.!v;v i: ^ 



wherein, for said random-rejection state, if said cumulative penalty count value has a 
nonzero value, said step of processing the incoming e-mail comprises the step of rejecting the 
incoming e-mail. 

Claim 17 (Canceled) 

Claim 18 (Currently Amended): \ i^-.uvJ o^if ^iM:^. 
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wherein said step of randomly rejecting comprises the step of accepting the incoming e- 
mail if said random number is greater than a product of said overall resource usage factor and 
said cumulative penalty count value, and rejecting the incoming e-mail if said random number is 
not greater than said product of said overall resource usage factor and said cumulative penalty 
count value. 

Claim 19 (Previously Presented): The method of claim 18 wherein said overall resource 
usage factor is increased if a system overall resource usage status increases and said resource 
usage factor is decreased if said system overall resource usage status decreases. 

Claim 20 - Claim 26 (Canceled) 

Claim 27 (Currently Amended): The method of ^a-w--™si^!lLAi further comprising the 
steps of: 

maintaining a behavior trace table entry for the e-mail sender; and 
determining said previous sender penalty count from said behavior trace table. 

Claim 28 (Original): The method of claim 27 further comprising the step of updating 
sender behavior values in said trace table entry in response to receipt of a sender e-mail. 
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Claim 29 (Previously Presented): The method of claim 28 wherein said sender behavior 
values include a member of the group consisting of: the number of e-mails, the total size of e- 
mails, and the total TCP connection time. 

Claim 30 (Canceled) 

C laim 3 1 (C urrcntly Amended) 



wherein said time-dependent decay factor is a function of the time interval between the 
last two updates of said behavior trace table entry and a pre-established retention period. 

Claim 32 (Currently Amended): The method of c^-h^h . : ^. 3 V wherein said previous 
sender penalty count value is determined from undesirable sender activity occurring over a pre- 
established retention period. 

Claim 33 (Original): The method of claim 32 wherein said undesirable activity 
comprises a member of the group consisting of: sending a large number of e-mails, sending e- 
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mails of relatively large sizes, using a relatively large amount of TCP connection time, and 
causing a TCP timeout. 

Claim 34 (Canceled) 

Claim 35 (Currently Amended) \ v o* Y' K ' _ 



vhe*e>s? -^ici Men ^ i>!^-- t! -^ pi-rvu-it- *e>-.\1e> j>r:> t >!h vc-if.s^ v.;Uic e-^-r^c-e-v 

reducing said previous sender penalty count value by a decay factor to yield a 
reduced sender penalty count value, said decay factor being a function of a 
pre-established retention period; and 

adding an activity penalty count value to said reduced sender penalty count value 
to yield an updated sender penalty count value, said activity penalty count 
value calculated as a function of current sender e-mail activities. 

Claim 36 (Previously Presented): The method of claim 35 wherein said decay factor is 
further a function of the time interval between calculation of said previous sender penalty count 
value and calculation of said activity penalty count value. 

Claim 37 (Canceled) 
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Claim 38 (Currently Amended): The method of via-H^-v^cln^i 4"\ wherein said step of 
establishing the identity of the sender comprises the step of ascertaining an IP address of the 
sender. 

Claim 39 (Cancelled) 

Claim 40 (Currently Amended): The method of ^Irtl^-YWiaii'n i.\ wherein said 
cumulative penalty count value comprises a prior penalty count value reduced by a time- 
dependent decay factor. 



Claim 41 -44 (Canceled) 



Claim 45 (Currently Amended) \ o 
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said random number, and 

wherein said step of randomly rejecting comprises the step of accepting the incoming e- 
mail if said random number is greater than said rejection factor and rejecting the incoming e-mail 
if said random number is not greater than said rejection factor. 



Claim 46 (Currently Amended): a mctnoa comonsmt*: 
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wherein said rejection factor is increased if said system overall resource usage status 
increases and said rejection factor is decreased if said system overall resource usage status 
decreases. 



Claim 47 (Currently Amended): \ \ o '-v - 
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e^abhdna- an idenhu ,n a sesxU-t an aie^nai^ o*t>u\ 

.1 iciOKUihy. a eumuhme ivntin eoutu value awviaied *\uh said tdennts t vhesesn 
eumulame penalty vmau 'U<o ^ la^ed as le ^ m\ pa? psevous uudesnaHe aenvU\ 
\ . o v ' so \ . , 
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device: and 

a.sed on the cumnbu\c rooalt) ^ontit value a<xi the 
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wherein said operating state comprises a random-rejection state, and wherein if said 
cumulative penalty count value has a nonzero value, said step of processing the incoming e-mail 
comprises the step of rejecting the incoming e-mail. 



Claim 48 (Canceled) 

Claim 49 (Currently Amended): A men 
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wherein said step of randomly rejecting comprises the step of accepting the incoming c- 
mail if said random number is greater than a product of said resource usage factor and said 
cumulative penalty count value, and rejecting the incoming e-mail if said random number is not 
greater than said product of said resource usage factor and said cumulative penalty count value. 

Claim 50 (Previously Presented): The method of claim 49 wherein said resource usage 
factor is increased if said system overall resource usage status increases and said resource usage 
factor is decreased if said system overall resource usage status decreases. 
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